ATTFI
In short
We use your phone number to create your account and your messages, calls and media only to deliver them to the people you choose.
Your messages are stored encrypted on our servers. We do not sell your data and we do not use your chats for advertising.
You can control who sees your info, and you can delete your account at any time.
Who we are
ATTFI is a messaging and calling app operated by Ovantix, Ahmedabad, Gujarat, India ("we", "us"). This policy explains what information we collect when you use the ATTFI app and website, why we collect it, and the choices you have.
Information we collect
Account information
- Phone number, which we verify with a one-time code (OTP) sent by SMS. Your phone number is your account.
- Profile name, profile photo and "About" text that you add.
- Optional details you choose to add in your profile, such as email address, birth date and gender.
Contacts
If you allow access to your phone's contacts, the app uploads the names and phone numbers in your address book so we can show which of your contacts use ATTFI, and to support features such as status visibility and adding people to groups. You can turn off contact access in your phone settings at any time.
Messages, media and status
- Messages you send and receive, including text, photos, videos, voice notes, documents, shared locations and shared contacts.
- Message information such as time sent, delivered and read, reactions, replies and deletions.
- Status updates you post (text, photo, video or audio) and who viewed them.
- Groups and broadcast lists you create or join, and their names, photos, descriptions and members.
Calls
We keep a call log: who called whom, voice or video, group or one-to-one, time and duration. The audio and video of your calls are carried in real time by our calling provider and are not recorded or stored by us.
Device and technical information
- Device name and model, operating system, app version and a device identifier, so you can see and log out your active devices.
- Push notification tokens, so we can notify you about new messages and calls.
- IP address, timestamps and error logs, used for security, preventing abuse and fixing problems.
Settings, backups and reports
- Your privacy, notification, chat and security settings (for example last seen visibility, read receipts, chat lock and two-step verification). PINs are stored only in hashed form.
- Chat backups, chat exports and account information reports that you ask us to create.
How we use your information
- To create and secure your account, and verify your phone number.
- To deliver your messages, media, status updates and calls to the people you choose.
- To show you which contacts use ATTFI and to apply your privacy settings.
- To send notifications about new messages, calls and security events.
- To create backups, exports and reports when you request them.
- To prevent spam, fraud and abuse, enforce our Terms and Child Safety Standards, and respond to reports.
- To keep the service working, fix bugs and improve reliability.
- To meet our legal obligations.
We do not sell your personal data, and we do not use the content of your messages for advertising.
Who we share it with
Other users see the information you share with them, according to your privacy settings. We also use trusted service providers who process data on our behalf, only to run ATTFI:
| Provider | What they do | Data involved |
|---|---|---|
| Hostinger | Server hosting and database | All account and app data, stored encrypted where described below |
| Twilio | Sending OTP verification codes by SMS | Phone number |
| Agora | Real-time voice and video calls | Call audio and video streams (not stored by us), user identifier |
| Google Firebase Cloud Messaging | Push notifications on Android and iPhone | Push token, notification content (hidden for locked chats) |
| Apple Push Notification service | Incoming call alerts on iPhone | Push token, caller name |
| Pusher | Real-time delivery of messages, typing and call events | Event data in transit |
We may also share information if required by law, to respond to a valid legal request, or to protect the safety of our users and the public, including reporting child sexual abuse material to the appropriate authorities.
Your privacy controls
- Choose who can see your last seen, profile photo, About and status: everyone, your contacts, or nobody.
- Turn read receipts off, silence unknown callers and limit messages from unknown accounts.
- Choose who can add you to groups.
- Block people. Blocked users cannot message or call you and cannot see your profile photo, About, last seen or status.
- Lock or hide chats with a PIN, fingerprint or face unlock.
- Turn on two-step verification with a 6-digit PIN.
- Use disappearing messages, delete messages for yourself or for everyone, and clear chats.
- See and log out your other devices.
How long we keep it
| Information | Kept until |
|---|---|
| Account and profile | You delete your account |
| Messages and media | Deleted for everyone, removed by a disappearing message timer, or removed after every member of the chat has cleared or deleted it |
| Status updates | 24 hours after posting |
| Chat exports | 7 days after creation |
| Account information reports | 30 days after creation |
| Chat backup | Replaced by your next backup, or deleted with your account |
| OTP records, security and error logs | As long as needed for security and fraud prevention, then deleted |
When you delete your account, messages you already sent stay in the chats of the people who received them, as with any messaging service. See Delete account for details.
Security
- Messages and their details are encrypted on our servers with AES-256-GCM. Messages are not end-to-end encrypted.
- All traffic between the app and our servers uses HTTPS.
- Photos, videos and documents in chats are stored privately and can only be opened through short-lived secure links.
- Chat lock and two-step PINs are stored only as secure hashes.
- We limit OTP and login attempts to protect accounts from being taken over.
No system is perfectly secure, but we work to protect your information and will notify you and the authorities of a data breach where the law requires it.
Your rights
Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you can:
- Access your information: in the app, go to Settings, Account, Request account info.
- Correct your information: edit your profile in Settings.
- Delete your account and data: in the app (Settings, Account, Delete my account) or on our delete account page.
- Withdraw consent for contacts, camera, microphone or notifications in your phone settings.
- Raise a complaint with our Grievance Officer (below), and with the Data Protection Board of India.
Children
You must be at least 13 years old to use ATTFI, or older if your country requires it. If you are under 18, you may use ATTFI only with the permission of a parent or legal guardian. We do not knowingly collect information from children below these ages. Read our Child Safety Standards.
International transfers
Some of our service providers may process data outside India. When this happens, we rely on providers that protect data with appropriate safeguards and only as allowed by law.
Changes to this policy
If we make important changes, we will update the effective date above and tell you in the app before the changes apply.
Contact and grievances
Privacy questions: privacy@ovantix.com
Grievance Officer: , Ovantix, Ahmedabad, Gujarat, India. Email: privacy@ovantix.com. We aim to reply within 7 days.